All on Internet

Wednesday, November 22, 2006

The Social Engineering Handbook

文章作者:Sirkuit and Phrantic Anima

___________________________________________________________________________
|\\\\\\\\\\\\\\\\-----The Social Engineering Handbook-----////////////////|
|////////////////------By Sirkuit and Phrantic Anima------\\\\\\\\\\\\\\\\|
|||| ||||
|||| "That which thinks shall not be infected" -Sirkuit, 1998 ||||
|||| ||||
|||| You can't expel the machine, but you can maniplulate and resist ||||
|||| ||||
|\\\\\\\\\\\\\\\\ Version 1.0 ////////////////|
|----------------<--------------------------------------->----------------|
|//////////////// http://n0p.crashcentral.com \\\\\\\\\\\\\\\\|
---------------------------------------------------------------------------

---|Table Of Contents|---

PREFACE: Introductions to Social Engineering

CHAPTER 1: Physiognamy

CHAPTER 2: Nuero Linguistics
-SECTION 1: Saying What They Want To Hear
-SECTION 2: How To Lie
-SECTION 3: Changing The Subject

CHAPTER 3: Gathering Information
-SECTION 1: Watching People
-SECTION 2: Shoulder Surfing
-SECTION 3: Dumpster Diving

CHAPTER 4: In Your Face Engineering
-SECTION 1: Becoming Someone Else
-SECTION 2: Dressing For The Occasion

CHAPTER 5: Randomizing Yourself

CHAPTER 6: Social Programming

CHAPTER 7: Art or Science?

CHAPTER 8: Where To Go From Here

GLOSSARY OF TERMS

CONTACT/MISC INFORMATION

---------------------------------------------------------------------------
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
---------------------------------------------------------------------------

PREAFACE: Introduction to Social Engineering

What is social engineering? Social Engineering is just a nice word for
conning. Conning a Telco employee into giving out numbers, conning a mark
into giving out his credit card number, or even just conning the girl at
the corner shop into going out with you on Friday night. The aim is to
achieve your goals by engineering the situation, and it's all about
control.

Engineering the situation requires planning. You must always remember that
it is much easier to direct a controlled situation than it is to direct an
uncontrolled one. When the ball's in your court, you have nothing to prove,
and everything to gain. You don't have to waste time proving your
worthiness to be in that situation. It's your situation. The other
person(s) is in YOUR territory. (Excuse my vagueness.)

A common thing people mistake when learning about social engineering is
that it is all about commiting crimes. That is completely untrue. Social
engineering has a plethora of uses, it just so happens that some of its
main applications are considered criminal. Well, what about its other uses?
Say you have a friend who is about to hear something that will upset her
greatly, and that it is NOT something she needs to know. You can use your
knowledge of scoial engineering to create a spontaneous lie to protect her
from the truth. That would require you to learn how that specific person
would react to different things you would say so that you could create a
lie that not only would help her by not revealing whatever ugly truth there
is, but will not allow any suspicion to arise.

Like I said before, social engineering is about conning, but it doesn't
have to be for criminal uses. 90% of it is just the research you have to do
to be able to engineer a situation.

What kinds of things will you have to learn to be a successful social
engineer? You have to watch how people behave, react, learn how people
think, learn to spot human weaknesses, learn what words to use when
speaking to what people, etc. etc. etc. The list goes on and on. If you're
ready to jump one step up above everyone else, read on.

---------------------------------------------------------------------------
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
---------------------------------------------------------------------------

CHAPTER 1: Physiognamy

Physiognamy is a belief system, commonly used in the middle ages, that says
you can interpret peoples' personalities by looking at some of their
physical features. The way I am going to talk about it will show it as a
way to create temporary stereotypes towards people with certain physical
characteristics so that you may have a better chance at engineering a
situation with them involved. Keep in mind that I am not encouraging you
to stereotype people, but merely to make educated assumptions so that you
may be better prepared when dealing with people.

I suggest, as I do with everything in here, that you go out and research
Physiognamy elsewhere to get a broader perspective of it. What you must do,
is learn what specific physical characteristics might mean about a person,
and learn how to decipher how true they possibly could be based on a
combination of the physical characteristic and any personality traits they
show when talking to them or watching them. You'd be surprised just how
accurate this can be. Below I will list several common physical traits and
what they might mean. As far as going beyond that, you must go out and do
some field work on your own to let this list grow.

Calloused Hands: This has a very high rate of meaning the person in mind
does either a fair amount of housework, or has a job involving manual
labor. You must make sure to see where the callouses are. If they are only
on certain places on the fingers for instance, this might just mean the
person plays guitar. All in all, it allows you to make the stereotype that
this person is not lazy, or at least is not lazy when it comes to things
that they enjoy doing.

Scars: People with multiple small scars are usually very active. Probe them
to find out where they got these from without directly asking (for example,
they may skateboard or ride bikes). Scars can have many, many possible
meanings.

Bad Acne: Acne is something most teenagers have at one time or another. If
someone has lots of white heads, you can guess that they aren't as insecure
about their appearance as msot peple are. Kids that are really insecure
usually check themselves all the time and pop the little buggers. Of course
the person just could have ti so bad they can't keep up, but you must
remember that the point here is to make educated assumptions and that you
won't be right all the time.

Lot's Of Makeup: This can mean a lot of things, but the most common are
that of insecurity or strong personal creativity. Look to see if it appears
as if the makeup is being used to cover up things, or to make the face
stand out. When guys wear makeup it is the same thing, but when you see a
male using makeup to cover up something that hints at very large
insecurities.

Wandering Eyes: Wandering eyes usually mean at least one of three things:
Lying, being intimidated, or paranoia... paranoia being the least usual
one of the group. When someone is intimidated or frightened they try to act
preoccupied with something else in their environment to avoid having to
make any form of contact with the person they are intimidated/frightened
by. Another common thing with that is the person will open up a book and
act like they are reading, look at their watch, or act like they are trying
to find something in their pockets. If you can intimidate someone, you have
greatly increased your chances of being able to engineer them. About the
lying... when most people lie they are afraid that you might discover
them, so for some reason they don't like to make direct eye contact.

"Strange" Clothing: When someone dresses out of the norm it is usually for
one of two reasons. Either they are trying to look weird to "be cool" or
because they like how it looks and detest the rampant conforming going on
by most people. If they act mature and speak very intelligently they are
usually dressing odd for the second reason and not to just "be cool."

That should be more than enough to get you started. Mosty likely you will
find new things that some of the above characteristics point to on your
own. The most important thing to remember though is to ALWAYS try to find
more than one physical trait that points to the same personality trait you
are suspecting the specific individual to have.

---------------------------------------------------------------------------
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
---------------------------------------------------------------------------

CHAPTER 2: Nuero Linguistics

SECTION 1: Saying What They Want To Hear

Now that you have some good ideas about how to use social engineering to
control situations, you must learn to speak in a manner that will make
the target feel comfortable, or to talk in a way that will get them to say
things that they normally wouldn't (for example, credit card #'s and the
like).

The first thing you must do is learn as much as you can about the person,
that way you can plan how you will approach the problem. The main goal at
first will be to get on their good side. For instance, if they like sports
you should ask what their favorite team is, then reply with something like
"Oh my God, that's my favorite team too! They're the greatest!" Ok, so that
sounds stupid... that's why I'm leaving most of this up to you.

Once you have a foothold on the person, begin to pry at them, always prying
by using words and phrases that you feel will be to their liking. Finding
out what people want to hear is the most difficult part of social
engineering, and takes long hours of studying to even come remotely close.

Here's a small example to get you going. It will be in the form of
dialogue. The person's (you) goal here is to discover secrets about this
girl's relationship with her current boyfriend.



You: So what do you really dislike that guys usually do?

Her: I don't know, it just pisses me off when they feel like they own you.

You: Yeah, I think guys that do that are fucking idiots.... it makes me so
sick ya know?

Her: Oh yeah, I know EXACTLY what you mean!

You: Your boyfriend isn't like that is he? Sorry to ask, but it sounds like
you're kinda upset now that type of thing was mentioned.

Her: Oh it's no problem... I dunno, he kinda acts like that sometimes... it
makes me so angry.

You: Why are you still with him then? You don't need to deal with that
crap.

There you go, you just hooked yourself a big one! Most people won't come
outright and start telling you details of such things as relationships
simply because they are personal. As you saw above though, if you can
get some sort of commonality going between you two, even if you were
lying, you just about own the conversation.

If I were to go over all aspects of this section, you'd have quite the
large amount fo reading to do. So, instead of writing all that out, I
encourage you to take notes and develop your knowledge of this yourself.
Learning what to say to what people is THE MOST IMPORTANT part of social
engineering, bar none.

SECTION 2: How To Lie

As you should already know, lying is an important part of this game.
You have to be good at it. Most people, when they first start social
engineering, have never told a major lie in their life. This doesn't
matter. In my experience, what it all comes down to is acting skill.
When I first started social engineering I was a drama student. I spent
4 years learning the art of becoming someone else. What I learnt was
that it was all about research. You can never do enough research on a
topic. You never know what you're going to have to know to pull off a
scam. Assuming that you are already a confident speaker, (if not, then
there's something you have to work on) what you should really be
studying is the art of RESEARCH.

What you have to research is the tricky part. It all depends on the
type of lie. To my knowledge, there are 3 common types of lies, each more
difficult that the last:-

Type 1: A lie that you tell on the phone to someone in order to get
information out of them, or to convince them you're someone you're not.
These include telling people you are a Telco worker, shop assistant,
whatever.

Type 2: A lie that you tell someone in person, in order to get information
out of them, or to convince them you're someone you're not. These types of
lies are somewhat harder than the phone ones, as body language has to be
taken into account.

Type 3: An unspoken lie. These are definately the hardest, as they can
only be done in person. These lies use nothing but body language and
appearance to convince people. A good example of this is avoiding being
carded when you go out with friends. If you manage to pull off the effect
that you are over 18, then no one (almost) actually asks for ID.

Tips for Type 1 lies:-

Before you even pick up the phone, think about who you are going to say
you are. When you think you have chosen a role best suited for the
person you are calling, research them. How do they talk? Fast or slow?
Is a false accent going to make you more convincing? Are they a
demanding type of person? Are they going to just sit on the phone and
agree with whatever the mark says? These are all things you have to
think about. There are hundreds more, but most of them are
situation-specific, so I can't mention them all. OK, once you know how
you are going to speak, you have to figure out what you are going to
say. Most of the time this will involve acting like a store worker or
something along those lines, so what you have to find out is if they
have some kind of protocol they have to follow on the phone. Usually it
something like, "Hello this is from . Can I
please speak to ?". When you think you have that down pat, the
only thing you can do to help you out is to ring a friend and ask them
if you sound convincing.

Tips for Type 2 lies:-

To pull off this kind of lie you should read the tips for Type 1 lies,
because it'll take all that and a little bit more. You have to know how
your "character" speaks, acts, even looks. Getting hold a uniform is
probably the easiest way to look like someone else, but it doesn't stop
there. You have to consider what kind of life these people lead. The
previous section on physiognamy outlined a few indicators as to how a
person's job might affect their appearance. Be sure to take all this
into account when you are getting ready for your meeting. After this,
all you really have to control is your body language. Use your hands to
speak if you have to. Keep them in your pockets if you have to. It
really doesn't matter what your specific actions are, just don't do
something that'll blow your cover.

Tips for Type 3 lies:-

These are by far the hardest to do, and (thank god) don't come about
too often. Like I mentioned before, they usually only happen when you're
trying to do something, (visit a bottle shop, say) when you're underaged.
These lies are all about body language. You have to look so convincing in
your role, that no-one questions your credibility. My friend once managed
to bluff his way into a formal dinner just by wearing a suit and acting
like the crowd that he was mingling with. His secret was to give the air
of a formalized person who was a member of a distant branch of the company
holding the function. They all accepted him, and he only ever had to speak
about the company once. The trick is to copy. Look at how everyone else is
acting, and just do that, maybe making a few changes to suit your own
personalized style.

Lying, as I have mentioned before, is difficult. It requires practice, a
bit of experience, and luck. My only advice to you is not to give up. If
you can't get the information you need, just look at alternative methods.
See the chapter "Gathering Information" for more tips on how to get what
you want.


SECTION 3: Changing The Subject

This is a relatively simple thing to do. Say you are in a situation in
which you want to change the subject of the conversation. All you must do
is use the skills you've learned since reading SECTION 1 of this chapter (I
know you've been practicing... right?) to learn what subjects in life the
target is favorable to. Now all you have to do is somehow link the subject
you wish to change to with one of those things that the person likes. That
should enable you to create some transition sentences that will effectively
get the subject of the conversation changed.

Another way is to force the new subject on. When you want to change the
subject, merely get all excited and say things to the effect "Oh my god oh
my God!" over and over and act like what you want to talk about is sooooooo
cool and important. With a lot of people, especially the denser ones, this
will work beautifully.

---------------------------------------------------------------------------
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
---------------------------------------------------------------------------

CHAPTER 3: Gathering Information

SECTION 1: Watching People

By now you can tell that the littlest details about a person provides you
with a myriad of windows into their personality. Perhaps the most important
thing to be able to do with social engineering is gathering information by
watching someone. Just follow them around and make a note of everything
they do. At first what you gather will seem pretty meaningless. You should
have some info on where they go, what they like to do, who their friends
are, etc. Now sit down with your notes and start disecting the person. Are
their friends popular people, do they go to sporting events, do they commit
any crimes, do they stab friends in the back, do they plot, do they like to
talk about people? All of this information is extremely helpful when you
must socially engineer this person. For instance, if you hear them always
talking about a friend of theirs behind the friend's back, you probably
could talk this person into betraying someone. Be careful though, because
they could just as easily betray you.

SECTION 2: Shoulder Surfing

When watching people you may come into some situations in which they will
preoccupy themselves with some task and you can "shoulder surf" them to see
what they are doing, writing down, etc. You may get all sorts of
information by doing this... such as credit card numbers, social security
numbers, adresses and phone numbers, ATM pins, personal information, and so
on and so on. Now some idiots might run right out and try surfing people
for some credit card information so they can buy themselves some new
clothes and a CD player, but that is unavoidable. People who are pathetic
like that will eventually get caught and pay their dues.

Since shoulder surfing is painfully obvious, try and do it when nobody is
looking directly at you, and NEVER get too close. If someone detects you
doing this they'll probably turn around and feed you a well placed knuckle
sandwich. If people near you see what you're doing they'll probably tell
the nearest police officer and then you'll have an awful lot of explaining
to do. The best way to go about doing this is to be patient, wear VERY dark
sunglasses so you can look around without being noticed, and not to get
greedy.

SECTION 3: Dumpster Diving

Mmmm... garbage, you know I love it. The most common reason people go
dumpster diving is to find boxes when moving, to look for things to
recycle, etc. Keep those in mind, those are your new excuses when caught
digging through a trash can at 3am. If you're careful and lucky enough you
won't have have to use them. When dumpster diving there is two major rules.
One is ALWAYS bring a friend (to drive the getaway car and to watch for
certain undesirables), and ALWAYS go at night. The reasons for these rules
are obvious enough.

For the purposes of social engineering you'll be looking for several items
in a few places.

When going after a specific person you'll want to get into their home
trash. This can be pretty difficult to do with neighborhood watch programs
and all, so I would just run up, grab their trash can, and take off with it
down the street. It might be a little less conspicuous if you take a few
bags of garbage and leave the can though.

When looking for a target, for whatever sick and twisted reason you may
have, the best place to go is to telemarketing businesses. They heave tons
of phone numbers and stuff into their cans. Sometimes you'll find companies
that shred their paper, but as far as I know most don't bother to. The big
problem with getting into big company trash cans is that of Mr. Security
Officer. Before you target a place, drive around there for a few nights to
see if they employ night security.

Extra Dumpster Diving Tips:

-If a trash truck comes, GET OUT FAST.

-If someone catches you, play innocent and feed them a pre-planned excuse.
Common excuses are that of "I got lost," "I was looking for recyclables,"
"My friend thought it'd be funny to throw my shoe out the window so I made
him pull over so I could get it," and "I am moving so I was looking for
boxes." Always swear you didn't know what you were doing was illegal and go
on and on about how it'll never happen again. BE POLITE!

-Wear dark clothes, but not clothes that make you look like a hoodlum.

-Wear gloves! No one wants poo on their hands!

---------------------------------------------------------------------------
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
---------------------------------------------------------------------------

CHAPTER 4: In Your Face Engineering

SECTION 1: Becoming Someone Else

I'm sure you can come up with countless reasons to act like someone else...
some being to call in and get their phone service shut off, to trick
friends of theirs, to get info you normally couldn't, etc. Before even
attempting anything like this, collect as many items from the following
list as you possibly can.

-Full Name (First, middle, last)

-Residential Information (Phone #, Adress, Fax #)

-Work Phone Number

-Social Security Number

-Physical Description (what your target looks like)

-Misc. Information (How many kids they have, other personal information)

Now that you have collected at least some of that information, it would be
a good idea to talk to that person somehow so you can gather information on
their speaking patterns. A good way to do that is to call their home and
act like you're from one of their insurance companies (find out which to
act like by looking through their trash and finding insurance papers), or
to pretend to take a survey. Surveyors are anger magnets though so you
might want to choose another identity.

By now you should have enough information about them to cover your ass at
least most of the time when questioned on who you really are. When someone
does this, act really surprised that such a question would be asked. Be
forceful when you speak (unless you are talking to someone the person
knows, then act as the person normally would).

Here's a tip for this section: Don't try to impersonate someone unless you
are on the phone, or you are just a really damn good engineer.
Impersonating someone "in person" is highly dangerous to your cover. Since
you are not the target, you most likely do not know who knows what he/she
looks like and who doesn't.

SECTION 2: Dressing For The Occasion

Oh boy is this section fun! This is where you get to play dress up to gain
easy infiltration of "places you shouldn't be," or to make people get the
wrong imperssion of you. First I'll talk about the impressions part.

When someone sees you, whether anyone likes it or not, they form some sort
of a judgement based on how you look. If you're one of those new
Psuedo-Gothic people, the reaction you'll probably get is either "Wow, cool
clothes man!" or the not-so-friendly "What the f*ck is wrong with you?" Now
if you were to dress up in a suit instead, people's ideas of you will be
altered drastically. Keep this in mind when walking into a large
corporation in search of "something."

Ok, here's the hard part. You must decide what to wear when going where.
Now right off the bat you might think the only thing appropriate for a
large coporate type place is a suit, but that is VERY wrong. In fact, a
suit isn't really that appropriate unless you look the right age to be
working there, and even then people would think it's kinda funny that there
is some "new guy" walking around and might ask a lot of questions. The best
thing I've found is to act like you are part of some maintenance crew. This
means you need yourself, say, a Telco hat and some "telco-guy" looking
clothes. Just waltz on in acting like you are doing a routine check on the
lines. It might help to make some fake, yet realistic, ID.

Speaking of identification: DON'T CARRY ANY. That is a very stupid thing to
do considering you are trying to act like someone else. If you do carry an
ID, put it in your sock or something.

Now you've got all the info you need on what to wear, but there is just one
last problem: your speech. I don't think anyone on the face of this planet
will not be suspicious of someone in a professional environment using the
words "dude" and "bro." Learn to speak your part. This will be harder for
some of you than others.

---------------------------------------------------------------------------
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
---------------------------------------------------------------------------

CHAPTER 5: Randomizing Yourself

The art of social engineering is a valuable skill, valuable beyond belief.
And the basis of it all lies in our social programming. Social programming
guides the way we act, think, and feel. To successfully become an engineer,
you have to learn to identify the key features of a person's programming,
thus enabling you to predict their reactions to almost any situation.

Now the question that you should be asking yourself now is, "How do I
stop someone from 'socially engineering' me?" Calling yourself a social
engineer just to have some kid you don't like make you eat humble pie is
one of the worst feelings a person can get, so that's why I've added this
section.

No one can escape social programming. It exists within us. We have no
control over it's existance, but we do have control over the extent to
which we are influenced by it. If you are heavily affected by your
programming, then you are more likely to be susceptible to engineering.
If you are able to "ignore" your programming, then you can randomize
yourself.

The basic theory behind randomizing yourself goes something like this:

1.) When a person's social programming evolves to a point where it
completely governs their lives (as most people are), then it is easy to
engineer them, because when you learn how they think, you can stay one
step ahead of them.

2.) If I act without regard to my social programming, then I will be
effectively "unpredictable".

3.) When I am "unpredictable", it suddenly gets a whole lot more
difficult to stay a step ahead of me, therefore I am as close as I can
get to immunity from engineering.

To put this theory into practice, let's assume that you are a regular,
hard-working, teenage student. Your busy schedule only lets you have a
few hours a week to socialize, so the first week you might use your
time to call up friends and just talk to them. Talk to them about
whatever it is that you like to talk to friends about. The second week,
spend the entire week without contact to the outside world. Then, after
you get the feeling that everyone is wondering just what the hell is up
with you, spend a few days constantly out and about, keeping yourself
busy any way you can. People, especially those close to you, should
find that you are a different person every day of the week. You are now
one step closer to randomization.

So far, I have only talked about randomization with respect to
lifestyle, as this is the most obvious one to people around you, and
they tend to notice the difference much faster. But to make it a bit
more obvious, you have to change the little things about you too. Every
change you make to yourself can only help in your randomization. If you
usually dress casual, go out one day in a suit. If you are usually a big
talker, take a back seat and let someone else direct conversation.
If you have a tendency to use slang terms, then every now and then talk
in a more formal tone. This will also help you practice for when you have
to sound at least ten years older on the phone.

There are endless changes you can make to your life. Most of them will
be noticed. But always try to remember that becoming a randomized
person might help you to avoid being socially engineered, but it could
also have drastic effects on the quality of your life and the people in
it.

---------------------------------------------------------------------------
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
---------------------------------------------------------------------------

CHAPTER 6: Social Programming

What is social programming? Well, it's the little voice inside your head.
The voice that tells us right from wrong, good from bad. It is the product
of generations of thought and teaching. It is our individuality.

It is a form of programming in which our society and it's components (be
they family, friends, enemies or strangers) condition our minds into
certain beliefs. It is even possible to program yourself. Social progamming
is responsible for most of the world's predjudice, especially among youth.

Youth, (most youth, anyway) I have found, have a tendency to be easily
misled. They might have a fight with one person of Asian descent, and
suddenly all the "damn chinks" are the enemy. They grow up believing
certain people are inferior and superior to themselves. Parents, from an
early age, teach their children things that are not always correct, but by
the time the kids realize this they are so convinced that it takes a long
time for them to come around and see the light.

A good example of this is the Vietnam War. Thousands cheered an
International army as they had been conditioned to believe that the
Vietnamese were inferior and would suffer a quick defeat (many still
believe this). When the television footage came back they were shocked to
discover that they were all wrong, but some people were never convinced.
There is still evidence of these people left today.

Social programming, in a way, can be seen as an enemy; a powerful,
non-physical force that is creating havoc everywhere. But it is also SAVING
lives every day. Our social programming, in it's primary form, is what
stops us from repeating dangerous things, because we will do something
once (say, overdose), learn that it's dangerous, and instinctively avoid
it. So in that way, it is good.

You can see that social programming is good or bad, and to tell the
truth, it doesn't matter because you can't avoid it. Even you and I are
socially programmed, but what you can do is be aware of it. By finding
someone elses key socially programmed thoughts and beliefs, you have
opened up yet another door into their life that, when used in
conjunction with the methods outlined in other areas, can provide you
with all the information you'll ever need.

---------------------------------------------------------------------------
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
---------------------------------------------------------------------------

CHAPTER 7: Art or Science?

Whe one considers Social Engineering, it is usually reffered to as, by
myself and other well-established engineers, an art. Yet in it's true form,
it is a science. To lexically define the difference between an art and a
science, would be nearly impossible. Socially defined, the difference is
usually expressed as "A science relies on fact and definite (usually
boolean) responses, whereas an art is focused around answers open to
interpretation.

When first learning to engineer, it is easiest to refer to it as a science.
This gives it a solid base that can be filled with facts that could, if
used in the correct sequence, acheive the desired outcome. But if one looks
carefully at the sequence and patterns used by this data, some holes become
evident.

This is where the word "art" comes in. Art is a way to fill in these holes.
It involves making educated guesses and predictions to provide the missing
answers.

But suppose that there were no holes. Suppose that mankind evolved science
to a state so refined that these gaps do not exist. Would there be a need
for art? Would arts slowly be eliminated from the earth as a new range of
super-sciences ravages the planet?

Or am I just jumping to conclusions? Is this never going to happen during
our time on this planet, or could the reverse of this even be true. Could
art really replace science? There are so many possible outcomes the mind
boggles to think of them.

After writing this much in a school maths tute, I paused. For a long time.
My mind started flashing through all the possible outcomes. I cannot
choose the one that will happen. There is a "hole" in my thoughts. Does
this mean that the contemplation of the relationship between art and
science is an art?

The answer to this question is unknown. It is highly unlikely that it will
ever affect me in my own life at all. And it is also irrelevant to this
writing. What is relevant though, is the fact that you now know the
easiest way to learn Social Engineering is to start of studying it like a
science. Take notes, run tests, assume all findings to be true in given
circumstances. Then, when you have a grasp on that, you'll find that you
are asking yourself questions that cannot be answered. This is when you
are ready to progress to learning it as an artform, learn to fill in those
holes. When you get this far contact either of us writers and we'll work
together from there.

---------------------------------------------------------------------------
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
---------------------------------------------------------------------------

CHAPTER 8: Where To Go From Here

Now that you have read through this handbook, you have a pretty good chance
at becoming a good social engineer. As you've noticed, most of this fine
art is researching things, so the best advice to give now is to continue
that practice as long as you are interested in taking advantage of the
social programming we have been stuffed full of since the beginning of man.
I urge you to come up with your own theories and methods to go about social
engineering with. If no one ever invents anything new, nothing will ever
change for the better.

Here are some last minute tips that were decided to be added:

-You can retrieve phone numbers, etc. at www.gopher.com

-Remember to gather as much information as possible before taking on a big
engineering project.

-Once you've been around with this information in mind for a long time, you
will start having the ability to lie and socially engineer situations on
the fly; that is one of the main goals of most engineers.

-Always use your knowledge for good, because the old saying, "What goes
around, comes around," comes true more than you would imagine.

-Learn to do things like faking sick, hiding emotion, showing fake emotion,
etc.

---------------------------------------------------------------------------
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
---------------------------------------------------------------------------

GLOSSARY OF TERMS:

Dumpster Diving: (v) Searching through people's rubbish bins for clues
about them, for example, Phone Bills, Customer Lists, and Receipts.

Neuro Lingustics: (n) Using language that appeals to a specific person to
open them up to you, and allow one to gain information that would normally
be considered too private.

Physiognamy: (n) The art of using a person's physical appearance to make
educated inferences about their lifestyle.

Randomizing: (v) To put something out of order, or to be in no distinct
pattern.

Shoulder Surfing: (v) Following a person closely so as to gain information
about them by looking at what they're doing.

Social Engineering: (n) The name given to any acts of engineering that
involve the interaction of people in any given environment.

Telco: (n) A name given to represent the global community of telephone
companies.

Social Engineer: (n) Any person who uses learnt knowledge to engineer
social situations, or to manipulate any general or specific part of the
world's social masses.

---------------------------------------------------------------------------
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | |
---------------------------------------------------------------------------

CONTACT/MISC INFORMATION:

To contact the writers of this handbook, please use the following
information:

Email: Sirkuit - Sirkuit_w@yahoo.com
Phrantic Anima - Phrantic_anima@hotmail.com

Website: http://n0p.crashcentral.com (Distribution Site)

We wish to thank the following people and organizations:

n0where Productions, C2032, HAO, Telcos everywhere for the use of their
equiptment (bwahahah), Plato, Troy R, Robin T, Shannon K, Alex B,
Austrailian and American phreaks, and anyone who has ever tried to push the
limits of the human mind.

Sirkuit wishes to dedicate his part in the production of this file to his
girlfriend Amanda.

Please don't bug us about spelling or grammar errors. You'd be surprised
how many people think it is that important.

No comments: